Please follow this best practices while developing your plugin:
- Always add a prefix on function names, class names and database tables.
- Don't load plugin assets (like css/js) on all places. Load it only where it needed.
- Don't insert anything in settings table for your plugin purposes. Create your own table to store settings for your own. But you can get data of settings table always.
- To prevent showing directory listing, add an index.html file on all sub folders of your plugin. You can use this code:
<html><head><title>403 Forbidden</title></head><body><p>Directory access is forbidden.</p></body></html>